From owner-freebsd-questions@FreeBSD.ORG  Thu Sep 19 14:31:42 2013
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTP id 7531A97E
 for <freebsd-questions@freebsd.org>; Thu, 19 Sep 2013 14:31:42 +0000 (UTC)
 (envelope-from jeff@p1technologies.com)
Received: from smtp144.iad.emailsrvr.com (smtp144.iad.emailsrvr.com
 [207.97.245.144])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id 2FCFC21D8
 for <freebsd-questions@freebsd.org>; Thu, 19 Sep 2013 14:31:41 +0000 (UTC)
Received: from smtp44.relay.iad1a.emailsrvr.com (localhost.localdomain
 [127.0.0.1])
 by smtp44.relay.iad1a.emailsrvr.com (SMTP Server) with ESMTP id E356B12878F
 for <freebsd-questions@freebsd.org>; Thu, 19 Sep 2013 10:23:09 -0400 (EDT)
X-SMTPDoctor-Processed: csmtpprox 2.7.4
Received: from localhost (localhost.localdomain [127.0.0.1])
 by smtp44.relay.iad1a.emailsrvr.com (SMTP Server) with ESMTP id DFBF412876A
 for <freebsd-questions@freebsd.org>; Thu, 19 Sep 2013 10:23:09 -0400 (EDT)
X-Virus-Scanned: OK
Received: from smtp192.mex02.mlsrvr.com (smtp192.mex02.mlsrvr.com
 [204.232.137.43])
 by smtp44.relay.iad1a.emailsrvr.com (SMTP Server) with ESMTPS id B8BB512885F
 for <freebsd-questions@freebsd.org>; Thu, 19 Sep 2013 10:23:09 -0400 (EDT)
Received: from IAD2MBX08.mex02.mlsrvr.com ([172.23.11.57]) by
 IAD2HUB05.mex02.mlsrvr.com ([172.23.10.69]) with mapi; Thu, 19 Sep 2013
 10:23:09 -0400
From: Jeff DiNisco <jeff@p1technologies.com>
To: "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Date: Thu, 19 Sep 2013 10:23:05 -0400
Subject: syslog program data to remote loghost
Thread-Topic: syslog program data to remote loghost
Thread-Index: Ac61Q8MUiCa3B06PTGiZbHMLoLoVHQ==
Message-ID: <CE6056D9.2D4FB%jeff@p1technologies.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.3.6.130613
acceptlanguage: en-US
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
X-Content-Filtered-By: Mailman/MimeDel 2.1.14
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Sep 2013 14:31:42 -0000

I'm trying to send program specific logs to a remote host.

I get that logging to a remote server can be done with:
*.warn;*.notice;kern.* @loghost

And I get that logging a program can be done with:
!lwiod
audit.*                                         /var/log/audit/smb.log

What I want to do is:
!lwiod
audit.*                                          @loghost

But for some reason this doesn't work.  Any advice would be greatly appreci=
ated.  Thanks.

Jeff